VYPR

miniOrange extensions

by Miniorange

CVEs (1)

  • CVE-2026-78074HigAug 31, 2026
    risk 0.57cvss epss

    Joomla Extension - miniorgange.com - Unauthenticated arbitrary extension deinstallation via various miniOrange extensions - a missing authentication check allows unauthenticated actors to delete arbitrary installed extensions. Only the free versions of the miniOrange plugins are…